Hook
A freshly minted proposal claims to solve the existential threat to every Bitcoin, Ethereum, and Solana wallet without touching a single address or requiring a migration. AmericanFortress has announced a “quantum-safe encryption scheme” that protects existing assets. The front-runner didn’t even bother to publish a whitepaper. In a space where technical details are the only shield against fraud, this is not a breakthrough — it’s a vacuum.
Context
The quantum computing threat is real but distant. Shor’s algorithm will eventually break the elliptic curve signatures (secp256k1) underpinning most blockchains. The industry has been preparing: NIST standardized three post-quantum signature schemes (CRYSTALS-Dilithium, Falcon, SPHINCS+) in 2024. Projects like QANplatform and Algorand have already implemented such signatures, but they require new addresses or native support. The narrative of “protect existing wallets without migration” is the holy grail — and also the perfect marketing hook for a team that knows code is harder to fake than a press release.
Core: Systematic Teardown
I spent 29 years dissecting cryptographic systems, from auditing EOS’s infinite mint bug to reverse-engineering Uniswap V2’s MEV dynamics. When I see a claim this bold, I look for one thing: mathematical proof. AmericanFortress provides none.
1. The Address Incompatibility Problem
Every Bitcoin address is a hash of a public key derived from secp256k1. Post-quantum signatures like Dilithium produce different key sizes (e.g., 1.3 KB for the public key) and cannot be mapped to a 20-byte Ethereum address or a Bitcoin bech32 string without fundamentally changing the address format. The claim “no address change” implies a cryptographic construction that compresses a post-quantum public key into the same 160-bit hash — a feat that would require either a breakthrough in hash compression or a reliance on a different trust model (e.g., trusted setup or hardware enclaves). The article mentions neither.
2. The Proof-less Performance
A bug is just a feature that hasn’t been exploited yet. But a claim without a codebase is just vapor. AmericanFortress has not released any source code, testnet, or even a technical paper. Their entire offering rests on a single press release. In my experience auditing over 50 protocols, projects that hide the math behind marketing invariably hide either flaws or an exit plan.
3. The Ecstatic Silence from Security Auditors
No reputable firm — Trail of Bits, Quantstamp, OpenZeppelin — has validated this scheme. The lack of peer review is the loudest signal. When I discovered the EOS race condition in 2017, I published a 40-page paper because the exploit could drain 100 million tokens. Real cryptography is peer-reviewed. AmericanFortress has not even submitted to a conference.
4. The Team Vault
Zero team background. In a field where a PhD in cryptography is the minimum entry ticket, anonymity is a liability, not a feature. The 2021 Axie Infinity scam taught me that anonymous teams often rely on hype to delay scrutiny until the treasury is drained. AmericanFortress echoes that pattern: a grand claim, no identity, and no verifiable track record.
Contrarian: What the Bulls Got Right
Let me play devil’s advocate. If the scheme is real, it would render every other post-quantum migration obsolete. Billions of dollars in wallet infrastructure would be saved. The market for such a solution is enormous — every exchange, custodian, and DeFi protocol would integrate it. The lack of detail might be deliberate: patents pending, or fear of copycats. Some of the best protocols (like Bitcoin itself) started with a whitepaper from a pseudonymous author.
But Bitcoin’s whitepaper contained full mathematical specification. AmericanFortress gave us a headline. The asymmetry is clear: bulls bet on asymmetric potential; I bet on asymmetric evidence. Until they release code, the most likely outcome is that the project dissolves, leaving behind a dead domain and a few gullible investors who bought a token that never existed.
Takeaway
The onus is on AmericanFortress to prove its claim — not on the market to assume it. Demand the whitepaper. Demand the audit. Demand the testnet. If they cannot deliver within 90 days, treat this as what it likely is: a narrative designed to extract attention, not to solve a problem. In a bull market, euphoria masks technical flaws. My job is to remind you that a promise without proof is just noise.